Understanding Administrative Risks in Medical Practice

EXPLANATION OF THE MOST COMMON TYPES OF INFORMATION ASSURANCE RISKS ADMINISTRATIVE RISKS Risk: Lack of documentation to mitigate threats and vulnerabilities Explanation: Not having a formal, documented program, which is always secondary to thorough risk analysis, might be the reason why you’re not able to implement effective safeguards to protect your ePHI against possible vulnerabilities and security threats. This may compromise your ePHI security in several ways: You may face medical identity theft due to unauthorized access, theft or disclosure of ePHI. Unauthorized access to your practice’s ePHI may leave it inaccessible, compromised and exposed.